Add a check to prevent overwriting valid data if smgrnblocks() gives a

wrong answer, as has been seen to occur with a buggy Linux kernel.  Not
really our bug, but it's a simple test in a seldom-used control path,
so might as well have a defense.

diff --git a/src/backend/storage/buffer/bufmgr.c b/src/backend/storage/buffer/bufmgr.c
index 147b2ef8d8ba85b099b9ac0ecdba47e7c266ef5d..aaa0dff6843f393d65e8ae088e1ca49bdd9284da 100644 (file)
--- a/src/backend/storage/buffer/bufmgr.c
+++ b/src/backend/storage/buffer/bufmgr.c
@@ -8,7 +8,7 @@
  *
  *
  * IDENTIFICATION
- *       $PostgreSQL: pgsql/src/backend/storage/buffer/bufmgr.c,v 1.210 2006/09/17 22:16:22 tgl Exp $
+ *       $PostgreSQL: pgsql/src/backend/storage/buffer/bufmgr.c,v 1.211 2006/09/25 22:01:10 tgl Exp $
  *
  *-------------------------------------------------------------------------
  */
@@ -175,9 +175,26 @@ ReadBuffer(Relation reln, BlockNumber blockNum)
                /*
                 * We get here only in the corner case where we are trying to extend
                 * the relation but we found a pre-existing buffer marked BM_VALID.
-                * (This can happen because mdread doesn't complain about reads
-                * beyond EOF --- which is arguably bogus, but changing it seems
-                * tricky.)  We *must* do smgrextend before succeeding, else the
+                * This can happen because mdread doesn't complain about reads beyond
+                * EOF --- which is arguably bogus, but changing it seems tricky ---
+                * and so a previous attempt to read a block just beyond EOF could
+                * have left a "valid" zero-filled buffer.  Unfortunately, we have
+                * also seen this case occurring because of buggy Linux kernels that
+                * sometimes return an lseek(SEEK_END) result that doesn't account for
+                * a recent write.  In that situation, the pre-existing buffer would
+                * contain valid data that we don't want to overwrite.  Since the
+                * legitimate cases should always have left a zero-filled buffer,
+                * complain if not PageIsNew.
+                */
+               bufBlock = isLocalBuf ? LocalBufHdrGetBlock(bufHdr) : BufHdrGetBlock(bufHdr);
+               if (!PageIsNew((PageHeader) bufBlock))
+                       ereport(ERROR,
+                                       (errmsg("unexpected data beyond EOF in block %u of relation \"%s\"",
+                                                       blockNum, RelationGetRelationName(reln)),
+                                        errhint("This has been seen to occur with buggy kernels; consider updating your system.")));
+
+               /*
+                * We *must* do smgrextend before succeeding, else the
                 * page will not be reserved by the kernel, and the next P_NEW call
                 * will decide to return the same page.  Clear the BM_VALID bit,
                 * do the StartBufferIO call that BufferAlloc didn't, and proceed.